I just add the security concern to the web.xml. we can uncomment it
later.